Due to the ongoing pandemic the Cifas office is currently closed to the public. Please follow the process below to make a DSAR.
By law, you are entitled to request a copy of information held about you in the Cifas fraud risk databases. This is known as a data subject access request (DSAR) and is free of charge. Cifas is required to respond to your request within one calendar month of receiving a fully completed form and supporting documentation.
To make a DSAR, you will need to request this online. You will need to provide the following information:
- your full name
- date of birth
- address history for the last 6 years
- Your home telephone and/or mobile number and email addresses.
We also require at least two proofs of your identity:
- a copy of your valid passport, driving licence, biometric residents permit or national identity card.
- a copy of a bank statement or utility bill (which lists your name and address and must be dated within the last three months), a council tax demand letter or statement or an income tax notification from HMRC (which lists your name and address and must be dated within the last twelve months)
You can upload digital images or scanned versions of your proof of identity. If you are unable to do this please contact us here to discuss alternative options.
The information that you provide to us as part of your DSAR will only be used for responding to your request, which includes verifying your identity, and any queries you may have following our response. We will retain the information you provide to us for up to six years in order to respond to any follow up queries. If we need further information from you in order to help us locate any data that we may be processing about you, we will contact you using the details you provide.
Why might you contact us?
If an organisation has turned you down for a product, service or employment opportunity they might advise you to contact a credit reference agency and Cifas for more information about why your application has been declined.
There are a number of possible reasons for your application being declined, including:
- Something on your credit report;
- The organisation’s credit scoring system;
- Information held about you by Cifas.
Cifas is not a credit reference agency and you should only contact us if you believe we hold information about you.
To contact one of the main credit reference agencies, click on the links below:
Frequently Asked Questions
Can I apply for a DSAR for my company?
If your company is being declined for products or services, please advise each company director to complete a data subject access request in their own personal details. If you are a sole trader, please also do the same and complete a data subject access request in your personal details.
Do Cifas markers show on my credit report?
A credit report will only show Cifas 'victim markers'. Victim markers – ‘Victim of Impersonation’ and ‘Victim of Takeover’ – remain in place for 13 months on the Cifas Databases from the date of submission.
How long do the records stay on the database?
Cifas markers can be held for up to six years in the Cifas database.
I know what information Cifas holds on me how do I make a complaint?
If you have received the results of a data subject access request and would like to dispute the information click here.
Still need assistance?
Click here to speak to an advisor.